doomrat | 02ca9b7f20449b7a706f8dbeb4269f1880db4abe119d8fd74a91f5b40dcc49f0 | Triage

Submit
Reports

Overview

overview

Static

static

Dispam.exe...ma.exe

windows7-x64

7

Dispam.exe...ma.exe

windows10-2004-x64

7

Sharing

General

Target

Dispam.exe_spiggma.exe
Size

13.1MB
Sample

240925-qmlf3sxekp
MD5

80e6aa631b359214f6ab716113150a2a
SHA1

5439a4c0d4ed7f515a6ee51b501ca4d06883d39d
SHA256

02ca9b7f20449b7a706f8dbeb4269f1880db4abe119d8fd74a91f5b40dcc49f0
SHA512

f58aaefa460403174d53a98dd01b1e7405fff24e22dd39c999e5a09e45654ef7b80c86ed5514a3736b409327f78a5225fb39d0b44fd5b15e7c03ac6f79246fab
SSDEEP

393216:dGV21SQhZ2YsHFUK2Jn1+TtIiFQS2NXNsIX3WabTToj:kFQZ2YwUlJn1QtIm28Inpzo

Score

10^/10

doomrat antivm apt backdoor banker bootkit botnet clipper collection crypter discovery downloader dropper evasion exploit exploiter upx adware pyinstaller

Static task

static1

pyinstaller adware antivm apt upx backdoor banker bootkit botnet clipper collection crypter discovery downloader dropper evasion exploit exploiter doomrat

4 signatures

Behavioral task

behavioral1

Sample

Dispam.exe_spiggma.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

30 seconds

Behavioral task

behavioral2

Sample

Dispam.exe_spiggma.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

30 seconds

Malware Config

Targets

- Target
  
  Dispam.exe_spiggma.exe
- Size
  
  13.1MB
- MD5
  
  80e6aa631b359214f6ab716113150a2a
- SHA1
  
  5439a4c0d4ed7f515a6ee51b501ca4d06883d39d
- SHA256
  
  02ca9b7f20449b7a706f8dbeb4269f1880db4abe119d8fd74a91f5b40dcc49f0
- SHA512
  
  f58aaefa460403174d53a98dd01b1e7405fff24e22dd39c999e5a09e45654ef7b80c86ed5514a3736b409327f78a5225fb39d0b44fd5b15e7c03ac6f79246fab
- SSDEEP
  
  393216:dGV21SQhZ2YsHFUK2Jn1+TtIiFQS2NXNsIX3WabTToj:kFQZ2YwUlJn1QtIm28Inpzo
Score

7^/10
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

pyinstalleradware antivm apt upx backdoor banker bootkit botnet clipper collection crypter discovery downloader dropper evasion exploit exploiterdoomrat

behavioral1

behavioral2

© 2018-2024

Terms | Privacy